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Abstract 


Quantum computing is expected to revolutionize cybersecurity. Traditional computers have calcu- 
lated and processed data using binary bits from the beginning. Because they can only handle one 
set of inputs and one computation, current computers are constrained. Qubits, which fuel quan- 
tum computers, are volatile. The development of a large quantum computer is likely to cause 
cryptosystems to fail. Since quantum computers can solve the encryption method, the current 
cryptosystem will soon be outdated. The main problem of the quantum age will be coming up 
with cryptographic protocols that meet the needs of security, usability, and adaptability with- 
out letting down the users’ trust in the system. Quantum computers bring about significant 
leaps forward in terms of computing capability. They will make it possible to address previously 
intractable issues. In this paper, we will explain what quantum computing is and look at how 
it might be used in cybersecurity. Quantum computing could make cybersecurity less safe, so we 
talk about cybersecurity threats to learn more about them. We also introduce several quantum 
attacks and their countermeasures. Finally, we provide quantum approaches to cybersecurity concerns. 


Keywords: Quantum Computing, Cybersecurity, Advanced Cryptography, Post-quantum Security 


1 Introduction 


Especially on the heels of digital transformation, 
the current technological stack is unquestion- 
ably evolving at breakneck speed. Enterprises are 
always looking for new ways to be innovative and 
use cutting-edge technology to move all of their 
business operations forward. Even though com- 
puters can do so much now, there are still some 
problems to solve [60]. Encryption, for instance, 
is a fundamental component of cybersecurity for 
many firms. Encryption often requires solving 
math problems that computers can’t do. Experts 


in the field say that even with the processing 
power of computers today, it will be decades or 
even thousands of years before these mathematical 
puzzles are solved. However, quantum computing 
[27] is shifting the focus of the discussion in a new 
direction. With the arrival of quantum computing, 
the world may be able to solve some of its most 
important computing problems. Quantum com- 
puters [18], which have computing capacity based 
on the power of the known universe, will do mathe- 
matical operations 158,000,000 times quicker than 
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ordinary computers [59]. They can finish a calcu- 
lation in four minutes that would take computers 
of today thousands of years to finish. 
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Fig. 1 Use cases of Quantum Computing [7]. 

Quantum computing could be used in a wide 
range of fields and businesses, as shown in Fig. 
1, from making credit risk analysis more accu- 
rate to reducing carbon and other greenhouse gas 
emissions through better routing. In light of this, 
the federal government of the United States has 
recently authorized a spending plan of $280 bil- 
lion for research that includes quantum computing 
as one of the most important areas in which to 
invest those funds [59]. The use of quantum com- 
puting in some fields, such as cryptography and 
cybersecurity, will result in a shift in the way orga- 
nizations work today. Due to the potential damage 
that may be caused by bad actors using quan- 
tum computing, researchers at HUB Security feel 
that the post-quantum world must be ready to 
begin as soon as possible [4]. So, HUB Security is 
getting ready to take advantage of this trend by 
saying that its Quantum Cure ransomware solu- 
tion guarantees that business backups are always 
safe, clean, and willing to use [9]. 

In this day and age of information technology 
(IT) and artificial intelligence (AI) [29], the main 
goal is to make sure that any software or online 
apps being used are safe. When done at the begin- 
ning of a process, finding evidence of security gives 
significant results that help one understand how 
to handle security leftovers to get the best results 
possible. A different security system uses a vari- 
ety of procedures and algorithms to make sure the 
program is safe. Security estimation is one of the 
most important parts of evaluating, administer- 
ing, and managing security to make it work better. 


It’s important to know that a security assessment 
done early on in the development process can 
help find unique worms, risks, vulnerabilities, and 
threats. 

Contribution of the work This article will dis- 
cuss the definition of quantum computing as it 
relates to cybersecurity as well as characterize 
quantum computing. The main contribution of 
this paper is presented as follows: 

e We give an overview of quantum computing, and 
how it can affect cybersecurity issues is discussed. 
e We demonstrate a few security problems that 
exist in quantum computing solutions. 

e We present several quantum computing solu- 
tions in the context of cybersecurity in different 
areas. 

e We show how quantum computing could be 
used in the future to make cybersecurity solutions 
better than they are now. 

The remainder of this paper is organized 
as follows. Section 2 gives the existing security 
issues in the ecosystem of quantum computing. 
Applications of quantum computing for cyberse- 
curity solutions are stated in Section 3. Section 
4 depicts several quantum threats in cybersecu- 
rity. The possible approaches of quantum com- 
puting in cybersecurity are given in Section 5. 
Section 6 introduces some future research aspects 
in quantum-based cybersecurity solutions. Finally, 
the paper is concluded in section 7. 


2 Quantum Computing and 
security Ecosystems 


The cybersecurity community around the world 
is quickly learning more about the possible bad 
effects of the current technological arms race. This 
is because quantum computing has the potential 
to mess with the cryptographic foundations of the 
infrastructure, which are very important to the 
system as a whole if they are used in an unethi- 
cal way. Businesses and the digital economy as a 
whole rely heavily on this underlying infrastruc- 
ture. Also, the community needs to act right away 
to make sure that worries about safety and get- 
ting a competitive edge don’t end up being big 
problems that stop quantum technology from hav- 
ing all of its potentially revolutionary effects. This 
can only be done by taking immediate action. As 
part of the World Economic Forum Center for 
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Fig. 2 Traditional computers vs quantum computers [53] 
Cybersecurity’s Future Series, a recent conference 
brought together well-known experts in technol- 
ogy, security, and policy from all over the world 
to talk about the strategic cybersecurity concerns 
that quantum technology raises [7]. Certain prob- 
lems can only be solved with the concerted effort 
of the whole global community working together. 
Decryption Capability Public-key cryptogra- 
phy is ”doomed to fail” because a powerful and 
error-corrected quantum computer would be able 
to calculate it too quickly. This would put at 
risk the technology that is used to protect many 
of today’s most important digital systems and 
activities. In this case, key exchanges, encryption, 
and digital signatures, which are used to protect 
financial transactions, secure communications, e- 
commerce, identification, and electronic voting, 
would all be useless. 

Digitization of Infrastructures Companies 
and governments may no longer be able to guaran- 
tee that the financial transactions and data they 
rely on will be available, kept private, and cor- 
rect. In the end, all of our data could be in danger 
because of this. There is a clear possible future 
danger that is relevant to the risk choices that are 
being made today in traditional computers (shown 
in Fig. 2), while the timetable and potential reper- 
cussions are now the subjects of discussion among 
technology and security experts. This is particu- 
larly the case in industries that are now rolling out 
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Fig. 3 Breaking down the security levels of cryptographic 
algorithms [52]. 

sensitive data and systems that have lengthy lifes- 
pans, such as healthcare, satellites, vehicles, and 
industrial control systems, all of which might be 
in operation for decades, if not longer. 
Globalizing of Ecosystem The global ecosys- 
tem has produced a variety of shared infrastruc- 
tures, each of which has dispersed ownership and 
control in the process of rolling out more and more 
of them. In cases where these systems have a long 
history, there is already a collective reliance on 
cryptography that may be vulnerable to attack, 
as shown in Fig. 3. It is happening at a time 
when hyperconnectivity is making shared archi- 
tectures, networked systems, and business models 
that depend on each other more common. Imple- 
mentations of public-key cryptography, like SSL, 
TLS, and HTTPS, help keep infrastructure safe, 
including the Internet’s architecture. These imple- 
mentations are used all over the world and could 
be attacked. 

Geopolitics of Quantum Computing Unlock- 
ing the potentially transformative value of quan- 
tum technology in the larger economy may be 
met with significant obstacles due to national 
security concerns regarding sovereignty and the 
need to maintain control over strategic capabil- 
ities. These obstacles may make it difficult to 
realize the full potential of quantum technol- 
ogy. These difficulties might constitute significant 
impediments. As a result of quantum technology, 
which has the potential to completely change the 
game in terms of both national security and the 
information race, there is a real risk that competi- 
tion will interfere with international collaboration 
and further widen existing gaps in security and 
industrial capability. This risk arises as a direct 
consequence of the fact that quantum technol- 
ogy possesses the potential to completely change 
the game. Several nations have already included 
quantum technology on their lists of restricted 
commodities, and governments all over the globe 
are investing a significant amount of money in 
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the research and development of their very own 
quantum technologies and knowledge to keep up 
with the competition. There is no known history 
of complicated security breaches that have been 
reported. These include the ability to explain how 
quantum algorithms made decisions (explainabil- 
ity), verifying that the algorithms do what they 
say they do and are not biased by nature (verifica- 
tion), and certifying the results that they produce. 
Other examples include being able to explain how 
quantum algorithms made decisions (explainabil- 
ity) (certification). The capacity to convey how 
quantum algorithms have arrived at their conclu- 
sions is also included in this category. [Case in 
point:] Even though this issue is linked to artificial 
intelligence (AI), there are other, more profound 
hazards, such as the potential of abuse by crim- 
inals and other players in the world. These risks 
might have a significant impact on the future. 
Cryptography and Quantum Computing 
Quantum computing speeds up the process of 
breaking prime numbers into their factors [45]. It 
means that computers with this technology can 
easily break cryptographic keys by quickly calcu- 
lating or searching for secret keys in a very thor- 
ough way. It makes it possible for these computers 
to easily crack passwords. Traditional computers 
would find it impossible to do a certain task, but 
when it’s done on a new computer, it’s easy as pie, 
which makes the cryptographic techniques that 
are used everywhere less secure. In the not-too- 
distant future, quantum computing will make even 
the most secure cryptographic methods much less 
useful, and some will stop working at all as a 
security measure. The real-world effects of weaker 
cryptographic algorithms [44] could become very 
important if quantum computing keeps getting 
better and moves out of the realm of research 
labs and academic papers. It is anticipated that 
over the next decade, these devices would be 
accessible to government agencies and huge enter- 
prises throughout the globe, providing them with 
access and power that have never been seen before. 
Quantum computing could be a huge step forward 
for humanity, but it could also be a big problem 
for the algorithms that keep us safe online. 


3 Cybersecurity and 
Quantum Computing 


The research is directly about how to keep tra- 
ditional ways of technology, communication, and 
information safe while keeping their adaptability 
in the post-quantum era. It is one of the scien- 
tific fields that is receiving a lot of attention right 
now. The concept that they should be placed in 
a quantum-safe state is a broader one [28]. Since 
we just started our trip, we still have a long 
way to go before we can say for sure that we 
have answers that can be taken as final. Quan- 
tum applications are used in many other ways, 
like making quantum random numbers, making 
quantum signatures, the Byzantine agreement, 
quantum flip-the-coin, secure electronic voting, 
secure multi-party computing, and so on [41]. 
Quantum Device We now have something 
referred to as a ”quantum device,” and it may be 
used to improve the safety of conventional com- 
munication primitives. One such example is the 
distribution of quantum keys (QKD) [63]. The 
notion that two honest people may have a shared 
random secret key that is only known to them is 
where the concept of QKD originates from. An 
opponent must first be able to read the key before 
he or she can intercept the secret random key. 
After a quantum state has been ”read” or mea- 
sured, it will ”collapse” into one of the classical 
states, which will be either 0 or 1. Because of 
this, any such hostile penetration causes some- 
thing strange to happen in the whole system, 
which can be encountered. 

Quantum Fingerprints There are several other 
ways in which a quantum device could pave the 
way for our regular security systems and primi- 
tives. One such approach is via the use of quantum 
fingerprints. One way to think of it is as a method 
of producing a string that is similar to the tradi- 
tional cryptographic hash functions that we use, 
but it makes use of a quantum computer. 

Secret Key Cryptography People think that 
there are several security methods available right 
now that could be useful in the post-quantum 
world. One such technology is called secret-key 
cryptography. The quantum feature of the quan- 
tum computer, on the other hand, creates a new 
security vulnerability that must be addressed. The 
superposition assault is one example of this kind 
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of attack. To explain it more simply, superposition 
is a quantum property in which a qubit, which is 
the name given to a bit in a quantum computer, 
may either have the value 0 or the value 1, or it 
can have a combination of the two. As soon as you 
measure the qubit, it will either collapse to the 
classical value of 0 or the classical value of 1. Now, 
a person who has access to the quantum computer 
oracle could learn the superposition ciphertexts of 
some plain text and then use a different algorithm 
to decipher the superposition (without directly 
measuring the superposition ciphertext) to learn 
about the cryptosystem. 

Computational security Quantum computers 
will help with computing in a lot of different 
ways, from huge exponential benefits to smaller 
quadratic or even constant benefits [34]. These 
advantages will vary depending on the nature 
of the issue. When these devices become avail- 
able, it makes sense that people will want to use 
the extra processing power for things that also 
need privacy and security. To put it another way, 
we are looking for secure protocols for quantum 
computing. Security ideas like authentication and 
encryption, as well as more complicated ideas like 
computing on encrypted data and secure multi- 
party computation, would need to be changed to 
work with quantum information and computation. 
This includes concepts that are more complex 
than authentication and encryption [26]. For this 
kind of question to have any meaning, we will 
first need to build quantum computing systems on 
a large enough scale to make real gains in com- 
puting power that can be used to solve everyday 
problems. At the moment, this is not the case. 
However, since it is expected that we will soon 
cross the classical simulation limit (having real 
quantum computers that are bigger than those 
that can be simulated by classical supercomput- 
ers), we are entering a time when real quantum 
speedups will eventually be possible. It’s possi- 
ble that we won’t have to wait too much longer 
before performance improvements can be applied 
to crucial daily concerns [20]. 

Post-Quantum Encryption Quantum comput- 
ing is expected to change a lot of businesses, espe- 
cially the financial sector, but it will also change 
how we keep our computers safe [58]. Quantum 
computing probably won’t be widely used until 
2030 or later, but businesses should start get- 
ting ready for it now. Because it is expected that 


quantum computers will someday be capable of 
factoring prime numbers used with asymmetric 
encryption algorithms, which form the core of 
existing data security systems, organizations need 
to reevaluate their cryptography systems as soon 
as possible. The conventional method of encrypt- 
ing information involves the manipulation of very 
large prime integers. Modern computers have a 
hard time deciphering these numbers due to their 
complexity. But since the quantum computer will 
be much faster at deciphering such complicated 
data, a new generation of encryption algorithms 
that can’t be broken by quantum computing is 
needed to prevent security breaches in the business 
world that could be very bad [38]. 
Post-quantum Cryptography There is no 
quantum computer that can handle the huge num- 
ber of qubits that would be needed to do the 
factoring that would be needed to break the cur- 
rent security protocol. This is because there is no 
such thing as a quantum computer. However, it is 
anticipated that this will alter over the next ten 
to twenty years, which would place firms, espe- 
cially in the financial sector, in a more precarious 
position. Therefore, scientists, policy officials, and 
cybersecurity specialists are focusing their atten- 
tion on the development of post-quantum cryp- 
tography (PQC) to overcome these anticipated 
challenges [58]. 


4 Quantum Threats to 
cybersecurity 


Quantum computers will be able to solve problems 
that are so hard to understand that traditional 
computers can’t even try. This includes figuring 
out how the algorithms are used to make the 
encryption keys that protect our data and the 
internet’s infrastructure. Table 1 depicts several 
existing quantum threats in cybersecurity and 
possible countermeasures. 

A big part of modern encryption is based on 
mathematical formulas that would take computers 
too long to figure out if they tried. Consider multi- 
plying, for instance, two huge integers in your head 
right now to make this process easier. It is not dif- 
ficult to calculate the product, but it is a far more 
difficult task, to begin with, the huge number and 
factor it into its two prime numbers. On the other 
hand, a quantum computer would have no trouble 
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factoring those integers and breaking the encryp- 
tion. Peter Shor invented a quantum method that 
he fittingly titled ”Shor’s algorithm [12].” This 
technique calculates big numbers very quickly and 
effortlessly, much more so than a traditional com- 
puter. Since that time, researchers have been hard 
at work constructing quantum computers that can 
factor numbers that are ever more complex. 

The RSA encryption that is utilized today is 
based on integers that are 2048 bits in length. 
This type of encryption is used a lot, especially 
when sending sensitive information over the inter- 
net. According to the opinions of many experts in 
the field, a quantum computer that could decrypt 
the message could not have less than 70 million 
qubits. Given that IBM’s 53-qubit quantum com- 
puter is now the most powerful quantum computer 
in existence, it may be a very long time before we 
can crack that encryption. 

As the pace of advancement in quantum com- 
puting research continues to pick up speed, it is 
hard to rule out the potential that such a com- 
puter may be developed within the next three to 
five years. As one example, at the beginning of 
this year, researchers from Google and the KTH 
Royal Institute of Technology in Sweden came out 
with ”a more efficient technique for quantum com- 
puters to execute the code-breaking operations, 
cutting the resources they require by orders of 
magnitude [48].” The results of their study, which 
were presented in a paper that was subsequently 
published in the MIT Technology Review, demon- 
strated that a computer with 20 million qubits 
could decrypt a number with 2048 bits in around 
eight hours. This data indicates that if more 
advancements of a similar kind can be achieved in 
the future, we will continue to make ground and 
will be able to move the timeline forward. 

When discussing the danger posed by quan- 
tum encryption, it is important to point out that 
the perishability of sensitive data is not the pri- 
mary worry. The susceptibility of information that 
has to maintain its secret far into the future is the 
bigger danger. This includes information that falls 
under national security-level categories, financial 
data, privacy act data, and so on. Because dishon- 
est individuals are already stealing this informa- 
tion while they wait for a quantum computer that 
is capable of breaking the encryption, these are the 
secrets that need to be secured with encryption 
that is quantum-proof right now. 


Encryption is still an important part of how 
society works, but it also comes with risks and 
worries. If commercial quantum computers got 
powerful enough to break public-key encryption, 
it would be a big problem for a country’s national 
security and the privacy of its financial, medical, 
and other kinds of data. 

Many different parts of cryptography depend 
on computational complexity arguments, which 
are sometimes called math [30]. The fact that no 
one has been able to find a technique to break 
an algorithm within an acceptable period for it to 
be a problem is what gives an algorithm its rep- 
utation for being secure. Most of the time, the 
parameters of the algorithms used in cryptography 
can be changed to give different levels of security. 
For example, the width of an RSA key can be any- 
where from 32 bits to 4096 bits, depending on how 
secure it needs to be. In the past, a key length of 
512 bits for RSA was believed to provide an appro- 
priate level of security. But as computer power 
has grown and cyberattacks have become more 
complicated, society has responded by gradually 
making keys longer to protect itself. However, the 
longer the keys are, the less useful an algorithm 
becomes; there is a balance to be struck between 
the use of the method and its level of security [30]. 

Recent data breaches have shown that most 
businesses keep data for longer than is required by 
law or than it is useful. The danger here is that 
data that is taken today does not necessarily need 
to be decrypted today for it to have value. Thefts 
of intellectual property, financial data, healthcare 
data, and other sensitive information might have 
repercussions far beyond the next decade. And 
those who commit cybercrime are aware of this. 
It is possible that a large-scale quantum computer 
could make it possible to decrypt most of the com- 
mon security protocols and all of the traffic that 
has already been recorded. This would threaten 
the growth of our economy, our national security, 
and a big part of our everyday lives. 


5 Quantum approaches to 
cybersecurity Concerns 


There are a lot of mysteries in the field of quantum 
computing, and researchers are still working hard 
to figure them out. Despite this, there is one thing 
that can be said with absolute certainty about the 
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Table 1 Quantum attacks and countermeasures 


eee Year| Attack Type Target Area Countermeasures 

(ae ai 2015 | Intercept-Resend Attack Quantum Key Distribution | Binding the leakage 
Cae 2016 photon-number splitting | Quantum key distribution | Watchdogs (superlinearity 
19)” attack system loophole) 
Pt aaa 2000 | Individual Attack realistic quantum key dis- Addition or modification in 
35] tribution hardware/software 

| Zhou et 
al., 2010 | Individual Attack BBM92 Protocol Privacy amplification 
64 
oe 2021 | Collective Attacks Quantum key distribution Quantifying information 

system 

a aug? | Calibration Attacks Continuous Variable Quan- Long-distance transmission 
16 tum Key Distribution of keys 

eee nee 9009 | Coherent Attacks Continuous Variable Quan- | Long-distance transmission 
AG ° tum Key Distribution of keys 
Qi et al., 2005 | Time-shift attack Quantum key distribution Constant time string com- 
AT system parison 
Twakoshi 2021 | Plaintext Attacks Quantum key distribution | Performing higher privacy 
24 system amplification 

I r i ivi QKD 

a eee 2021 | Detector blinding attacks eae key distribution oe navies 
Makarov 
iotme 2005 | Faked states attack Quantum cryptosystems Kak protocol 
37 
Wiechers ; : : 
et al., 2011 | After-gate attack Quantum cryptosystems ae sn a Eee 
61 
Tan et al., continuous-variable Conceiving novel QKD 
55 ener.) Wavelen eth attacks quantum key distribution schemes 
Jain et eeee : Spe 
re L. 2014 | Trojan-horse attack Sole key distribution Avoid intuitive 
25 ystem measurements. 


effect that quantum computing will have on cyber- 
security: it will pose a risk to both cybersecurity 
and the encryption methods that we use now. To 
lessen the impact of this risk, we have to adjust 
the way we maintain the safety of our data and 
get started doing it right now. We need to han- 
dle the quantum threat in the same manner that 
we handle other security weaknesses. This means 
putting in place a defense-in-depth strategy, which 
is a plan with several levels of protection that 
are quantum-safe. Table 2 shows the existing 
quantum-based approaches in the cybersecurity 
field. The need for cryptographic agility is some- 
thing that forward-thinking security companies 
are aware of, and as a result, they are searching 
for crypto-diverse solutions such as those provided 
by Quantum exchange to make their encryption 


quantum-safe right now and quantum-ready for 
the threats of the future [48]. 

It is essential to keep in mind that quantum 
technologies have been around since the beginning 
of time. MRI machines, LED lights, and even the 
GPS clocks in cars are all examples of technologies 
made possible by quantum physics. Even though 
the exact year that quantum computers will be 
able to do useful work is unknown (current pro- 
jections put the year at 2030), the first step is 
to recognize that they will have an effect on the 
cryptography used today and that the solutions 
that are in place for cybersecurity will largely be 
insufficient. This is the time to think about such 
a threat [49]. 

The following constraints are a seismic shift for 
cryptography, which means we need to rethink our 
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information security strategy in depth. Cryptog- 
raphers are already looking into different ways to 
protect against the dangers of quantum comput- 
ing, which they see as a worthwhile task in and of 
itself [23]. 

Quantum Poverty Every company and every 
member of the community has to take immedi- 
ate action to lower the danger. When quantum 
technology becomes more common, a strategy like 
the global technology councils that have been 
set up to control artificial intelligence may be 
needed to keep an eye on all of the principles 
and models of global governance. This scenario is 
possible because global technology councils have 
been formed to control AI. You might add items 
to a list of principles, such as supporting the eth- 
ical use of quantum resources and making sure 
that quantum infrastructure is not used to break 
standard encryption. These are both examples 
of things that may be included. You could also 
make sure that everyone has the same access to 
quantum technologies to stop ” quantum poverty,” 
which happens when some people can’t use these 
technologies because they aren’t available to them. 
Increasing Quantum Literacy It will be very 
vital to take the step of increasing ” quantum lit- 
eracy” across the ecosystem, both at the level 
of business leadership and at the level of policy 
leadership. Leaders need to know what is meant 
by “quantum technology,” what its different parts 
are, when and how it might become available, 
what risks come with it and how they affect orga- 
nizations, and what needs to be protected because 
of that. This education and training are necessary 
because they are necessary. This is because there 
is a need for educational and vocational opportu- 
nities. Enterprise leaders will be among the first 
to have to figure out how big the quantum risk 
is for their business and decide when and how to 
act. In addition to this, a risk assessment has to be 
done to determine which industries, if any, need 
to collaborate to address the problem. When it is 
unclear who is responsible for this change, this is 
the single most critical thing that you should do. 
Advanced Cryptography The approach to 
post-quantum cryptography that is the simplest 
to understand is centered on the development of 
algorithms that are challenging even for quan- 
tum computers to decrypt. This method is useful 
because it works with regular computers. One pos- 
sible solution would be to give people incentives to 


use encryption that can’t be broken by quantum 
computers. However, to protect the global ecosys- 
tem, laws and rules would also need to be put 
in place. Standards like the NIST’s post-quantum 
cryptography challenge can make it clear what 
practices each organization should use. Also, by 
making sure that these and other similar stan- 
dards can be used internationally, we can take a 
big step toward making them more widely used 
around the world. 

Lattice-based Algorithms Lattice-based algo- 
rithms are a different way to do cryptography that 
can be used instead of traditional methods. This 
is yet another possibility. The methods, which 
are usually only talked about in scientific cir- 
cles, were made to be safe and did not depend 
on any assumptions about how the processing 
power would be used in the end. Companies like 
Google have begun testing post-quantum cryp- 
tography methods that make use of lattice-based 
algorithms. These methods are also being worked 
on by the National Security Agency (NSA), the 
National Institute of Standards and Technol- 
ogy (NIST), and other government agencies. The 
National Institute of Standards and Technology 
(NIST) has been working on establishing tools to 
analyze these new algorithms, and it anticipates 
publishing its results between the years 2022 and 
2024 [52]. 

Integrity Assurance In both the staff onboard- 
ing process and the customer onboarding process, 
cloud identity providers and cybersecurity vendors 
play an important role. If the mission is to be suc- 
cessful, both authentication and communication 
must be kept honest. Key strategies that should be 
in any playbook are testing encryption methods all 
the time, making sure that key transfers are safe, 
and slowly adopting new cryptographic algorithms 
as they come out. Also, businesses have a duty to 
invest in resources that protect both the encrypted 
conversations they store and the user data. These 
regions cannot afford to remain susceptible to the 
computational power of the future. Okta [52] puts 
a lot of importance on keeping the authentication 
and multi-factor authentication processes private 
so that they can do what it’s supposed to do, 
which is connect everything. While we will con- 
tinue to make sure that the authentications used 
today are tried and true, we will also keep an eye 
out for what the future has in store for us. 


Springer Nature 2021 ETRX template 


in Quantum Computing Paradigm 9 


Table 2 Existing Quantum-based Approaches for Cybersecurity 


Mee Year| Security Type Key Contribution Findings 
carames Blockchain, Dis- Ouantimnesiseant Introduces encryption for the 
et al., 2020 | tributed Ledger, blochehain cevotesrach blockchain that is immune to 
17] Cryptography yptograpny: assaults from quantum computers. 
Althobaiti : : Security concerns relating to the 
and Security for post- | Post-Quantum Internet of é 
2020 : Stes Internet of Things that stem from 
Dohler quantum IoT Things cybersecurity issues. he posteauantiin Grd 
5] : : 
Kuznetsov : 5 Schemes for post-quantum digital 
et al., 2020 HP tography and Error-correcting r Bogle signatures that are based on the use 
igital Signature quantum digital signatures i 
32] of error-correcting codes 
AL 
darwbiet 2021 Safety key Manage- | Scalable quantum-safe key | A key management system that is 
al., ment. management both scalable and quantum-safe. 
2| 
Dixit et : Quantum annealing-based With the “help ot a limited 
quantum annealing- : Boltzmann machine, quantum 
al., 2022 : restricted Boltzmann : : 
based cybersecurity : ; annealing-based cybersecurity may 
11 machine cybersecurity. : 
; be achieved. 
Kilberet Cybersecurity for quan- | Protection of information for quan- 
al., 2021 | quantum threats tum computing considering | tum computing focuses on quantum 
28 quantum concerns. risks and vulnerabilities. 
Libicki be ah Post-pandemic cybersecu- | The use of quantum communica- 
and Gom- 2021 Communication ta + : on ia th ri demi it 
pert Security. ri ¥ via quantum communi- - in the post-pandemic security 
33 cation. sector. 
Quantum key distribution (MDI- 
Yan et al., 2021 Security key distri- | MDI-QKD-based microgrid | QKD) is the foundation of the 
62 bution control architecture. microgrid control architecture 
being developed. 
Zhou et Cusatue key dist Future internet security Quantum cryptography is essential 
al., 2018 bution (QKD) with quantum cryptogra- | for the continued safety of the inter- 
65 phy net in the future. 

: ; ; Model for deep learning that com- 
Suryotrisongko,and DGA botnet detec- Cybersecurity _ hybrid bines quantum and conventional 
Musashi 2022 ti quantum-classical deep : . sane 

ion : : techniques, with application to 
54 learning model. cybersecurity 
Abd EF Saud Protocol for authentication and 
3 ae Quantum walk-inspired és 
Latifet Authentication for ines encryption based on quantum 
/ 2021 is : authentication and encryp- . : _ + 
al., cybersecurity . walks, which were inspired by 
1] tion protocol (QIQW) quantum mechanics (QIQW). 
Mosca 2018 post-quantum Quantum-key distribution Quantum cryptography, as well as 
40] cybersecurity (QKD) and cryptography the distribution of quantum keys. 
Dixit ef Cybersecurity and | Quantum computing with | Computing on the quantum level 
al., 2021 | Bar-and-stripes restricted Boltzmann | by using a Boltzmann machine with 
10] (BAS) machine (RBM) certain restrictions (RBM). 
ane 2021 Encryption-based CoreVUE post-quantum | CoreVUE, a post-quantum security 
14] key exchange security bypasses PKI. protocol, is able to circumvent PKI. 
Albataineh Gdereeciniie cae Quantum computation- | Quantum computing in the con- 
and Nijim | 2021 pc y based cybersecurity | text of cybersecurity education and 
3] education training programs. 
eee 2017 Quantum Traffic | Quantum annealer traffic | Optimization of the flow of traffic 
43 Flow optimization. via a quantum annealer. 
Quantum computing to Encryption and decryption of sen- 
Ko and : encrypt /decrypt cybersecu- re : 
; Encryption and ce : sitive data in the field of cyberse- 
Jung 2021 D , rity data using Advanced : ‘ : 
ecryption : curity using an algorithm based on 
31 Encryption Standard ihe AES and a ti 
(AES). e and quantum computing. 
Haseye: el Random key genera- | Cybersecurity quantum Random number getlerators based | 
al., 2020 . : on quantum mechanics for use in 
tion random number generators ; 
21 cybersecurity. 
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Post-quantum Security The term ”post- 
quantum security” is often used interchangeably 
with ” quantum-safe security.” Let’s begin with the 
worst possible outcome, just as we would if we 
were modeling a security issue [6]. Let’s say that 
the side that you can trust uses a classical com- 
puter, and the side that you can’t trust uses a 
quantum computer. In the old world, we would 
want to build a security system that could not be 
broken, not even by an opponent who could use 
quantum computing. The term ”post-quantum 
security” refers to the state of being successful 
despite adverse conditions. This is one subject 
that is receiving a lot of attention from researchers 
these days. Let’s have a look at the steps that need 
to be taken to reach such a post-quantum security 
paradigm. 

Post-quantum Algorithmic System Two dif- 
ferent strategies are being looked into right now 
to protect society from the risks that quantum 
computing could pose. The first category con- 
sists of post-quantum algorithmic systems. This 
cryptographic method can be used on today’s 
computers, and it is anticipated that it will be 
resistant to quantum assaults. Another comple- 
mentary approach that is now being worked on 
is based on using quantum technology. Even if 
there is a possibility that the improper applica- 
tion of quantum technology might compromise our 
capacity to encrypt information and securely com- 
municate it, there is now equipment on the market 
that can reduce these dangers. 

Post-quantum Cryptography (PQC) One 
possible answer is for companies and other organi- 
zations to begin researching post-quantum cryp- 
tography (PQC) algorithms and to replace their 
existing ones with new ones that are resistant 
to quantum computing. The National Institute 
of Standards and Technology (NIST) has found 
the first four encryption algorithms that it thinks 
would be able to stand up to quantum computing. 
Businesses should look into the safety of post- 
quantum candidates and switch to using these 
algorithms to make sure that their data stays safe. 
Start by figuring out which alternatives are the 
most likely to work, and then plan your transition 
while keeping in mind that PQC solutions are not 
yet fully developed. 

Advance Quantum key distribution (QKD) 
Quantum key distribution (QKD) is an additional 


possibility. This results in the creation of a com- 
mon, shared secret between the users, which can 
then be used to create secure communications 
that may be sent over standard channels. To get 
forward secrecy, however, QKD needs specialized 
equipment, such as the best possible optical fiber 
infrastructure. It is a way to make sure that stolen 
session keys can’t be used to do bad things. In 
addition, companies need to think about revis- 
ing their procurement procedures and making it a 
requirement that any future technology purchases 
need to have cryptographic flexibility. This means 
being able to add and switch to newer algorithms 
that are more secure when they become available. 
Next-Generation Quantum Secuirty Realis- 
tically, quantum security shouldn’t be seen as 
a substitute for the measures that are already 
in place; rather, it should be considered as an 
extra kind of security that will need to be han- 
dled in conjunction with the infrastructure that is 
already in place. Conventional and post-quantum 
security measures will need to be implemented, 
managed, and maintained on an organization’s 
systems. These issues will need to be taken into 
consideration by the organization. The security 
industry is now dealing with a variety of struc- 
tural issues brought on by the technologies of the 
next generation. Even while the improper use of 
quantum technology might put a damper on our 
capacity to encrypt data and safely communi- 
cate it with others, there is already equipment on 
the market that can offset the threats posed by 
quantum computing. 

Information security rather than mathe- 
matical security makes the one-time pad the 
only quantum-safe cryptography [15]. Technically, 
QKD is safe because any attempt to get the keys 
for mathematical decryption will destroy the keys, 
making it impossible to use them to decrypt the 
message. QKD has some problems that make it 
hard to use in general, but modern technology may 
be able to make useful one-time pads. OTP needs 
keys longer than the message being encrypted, 
making it unsuitable for the internet. However, 
some firms are researching the prospects of new 
technology [57]. 

Qrypt began with the idea that encryption key 
transmission poses a quantum hazard. Avoiding 
critical communication eliminates the danger. It 
devised a method to generate identical quantum 
random numbers at the source and destination. 
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Quantum physics generates really random num- 
bers. These numbers may produce identical keys 
without internet transmission. Since the numbers 
may be generated and saved until use, the proce- 
dure can be chained to give an authentic OTP for 
the keys without sending them over the internet. 
This approach yields quantum-secure solutions 
[57]. 

Incrypteon Shannon’s information theories were 
used by the British company in the one-time pad. 
The science is mind-numbing yet based on Shan- 
non’s 1949 Communication Theory of Secrecy 
Systems Equivocation. Encryption claims that 
statistics and probability define complete secrecy. 
A ciphertext keeps everything completely secret 
if the attacker knows the same thing about the 
message’s contents before and after inspecting 
it with unlimited resources. Encryption ensures 
that conditional entropy never equals 0, there- 
fore establishing ”perfect secrecy” through its 
unique software and ” perpetual equivocation.” It’s 
accessible now and automatically quantum secure 
[57]. 

Rixon Another startup, Rixon, is participat- 
ing. It protects web-based enterprises’ PII, but 
its concepts may be used elsewhere. Plaintext 
is tokenized in the cloud and never stored. The 
cloud tokenization engine stores just the tokeniza- 
tion path for each tokenized character, not the 
plaintext (for the purpose of comparison, this 
tokenization route is equivalent to the crypto- 
graphic key but is random for each character). 
The OTP’s ”key” matches the message’s length. 
Rixon tokenizes personally identifiable informa- 
tion, but it could also protect intellectual property 
and business strategies [57]. 


6 Future of Quantum 
Computing 


The development of countermeasure technologies 
against future cyberattacks is not the only fac- 
tor that will determine how safe the future will 
be. We need to work together on a global scale 
to set up the proper governance that will encour- 
age the development and use of quantum security 
technologies in the global ecosystem, as shown in 
Fig. 4. It’s becoming more and more important for 
people to be able to communicate safely and do 
math well at the same time. Both the computer 


FUTURE DANGER 


Experts who think there is >50% 
chance of a quantum threat and the 
number of years in which it will hit. 
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Fig. 4 The chronology of the quantum threat [41]. 
and the internet have had a truly transformative 
impact on the society we live in. 

In the next five to ten years, there will be 
an explosion of new possible scenarios as quan- 
tum technologies become more integrated into the 
current computing and communication infrastruc- 
ture. In the future, networks will almost certainly 
have both classical and quantum devices and links 
[36]. Some of these classical and quantum devices 
and links are likely to be lying. Different parts 
of these future networks will have different lev- 
els of complexity, from simple routers to servers 
that can run universal quantum algorithms [8]. For 
such a complex network of classical and quantum 
communication to work, it needs to be built on 
a strong and innovative foundation that, despite 
being new, is flexible enough to handle the com- 
plexity of real-world implementations and new 
applications. 

Post-quantum security paves the way for our 
classical internet to stay safe in that era [56]. On 
the other hand, quantum-enhanced security wants 
to take advantage of the development of quan- 
tum communication to achieve performance levels 
that can’t be reached with classical communica- 
tion. This is different from post-quantum security, 
which makes it possible for our old communica- 
tions to still be safe in the future. In the meantime, 
quantum cloud services, including a variety of 
capabilities, are beginning to become accessible. 
Quantum-enabled security gives users the infras- 
tructure they need to be sure that the quantum 
cloud’s new, unmatched computing power meets 


Springer Nature 2021 ETRX template 


curity in Quantum Computing Paradigm 


the right standards for accuracy, reliability, and 
privacy. This will be accomplished through the 
utilization of the quantum cloud [22]. 

Most government organizations and private 
businesses will need to take three main steps to 
prepare their digital infrastructure for quantum- 
resilient cybersecurity [51]. To start, the current 
encryption, which can be broken by quantum 
attacks, should be looked at and written down. 
Create a strategy to implement quantum-safe 
cryptography in your network wherever it is neces- 
sary, including servers, edge devices, and Internet 
of Things devices, and Conduct tests in your 
information technology infrastructure using a sys- 
tem that is quantum-safe and cryptographically 
agile [50]. When working with an experienced 
consultant or service provider, it may not take 
long to choose the right cryptographic algorithms. 
Quantum-safe security solutions, on the other 
hand, will take more time to set up because of 
the size and complexity of your organization’s 
network. 

In the traditional form of computing, each bit 
represents either a one or a zero. However, in quan- 
tum computing, a quantum bit, also known as a 
qubit, can hold both the value one and zero at the 
same time. This paves the way for a whole new set 
of possibilities regarding the capabilities of com- 
puters. Since quantum computers are able to test 
out several potential answers all at once, they are 
able to solve problems far more quickly than tra- 
ditional computers. They are also not restricted 
by the same limits that traditional computers are, 
which means that they can tackle issues that are 
now difficult to address. Because of this, quantum 
computing is a great option for giving artificial 
intelligence (AI) its power. AI systems need large 
amounts of computer power in order to handle 
the immense volumes of data they analyze [13]. 
Quantum computing has the ability to fulfill this 
need for power and open the door for artificial 
intelligence to realize its full potential. 


7 Conclusions 


We have reached a crucial point in the growing 
arms race between countries. From a strategic 
point of view, quantum technology is important, 
and record amounts of money are being put into 
it. This race is nearing a tipping point. The tech- 
nology could cause large and systemic risks to the 


ecosystem, which, if we don’t work together to 
solve them, could make it very hard to find out 
what the real value of quantum technology is. This 
gives people who work in cybersecurity a chance 
to be the first to come up with the ideas, meth- 
ods, and multi-stakeholder ecosystem that will be 
needed to build the trust that is needed to fully 
take advantage of the potential of this new tech- 
nology. In the age of quantum computing, one of 
the most important factors that will determine 
how long software and online applications will last 
is a thorough analysis of the program’s security 
features. 
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